
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
File: 4vp6LLwyeRiAQsNBPdniSXzUndI.mft (raw, json)
Hash identifier: ANbf1CBwBFkLNiYJYJWbxvgEORXjeXfGcoafBHrBJPY=
Subject key identifier: 29:99:E5:BB:14:8A:1A:EE:B2:86:39:93:93:59:0F:67:25:A5:DC:3C
Authority key identifier: E2:FA:7A:2C:BC:32:79:18:80:42:C3:41:3D:D9:E2:49:7C:D4:9D:D2
Certificate issuer: /CN=A91D2B4A/serialNumber=E2FA7A2CBC3279188042C3413DD9E2497CD49DD2
Certificate serial: 03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
Manifest number: 02
Signing time: Thu 23 Jul 2026 10:24:57 +0000
Manifest this update: Thu 23 Jul 2026 10:24:56 +0000
Manifest next update: Thu 30 Jul 2026 10:24:56 +0000
Files and hashes: 1: 4vp6LLwyeRiAQsNBPdniSXzUndI.crl (hash: dq4TM0BcvzGiZOA/sJ/RP9q6Tip5kudwMD7LZ2OpQ0o=)
2: BD6C0B8A868011F1865E2E2167A30FBC.roa (hash: R++XQHgwrrHwUQ5zUbzG8m/3mR3SUeHymJ6MUMUg2fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.crl
rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B4A, serialNumber=E2FA7A2CBC3279188042C3413DD9E2497CD49DD2
Validity
Not Before: Jul 23 10:24:56 2026 GMT
Not After : Jul 30 10:24:56 2026 GMT
Subject: CN=6a61ebf9-a178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:b2:b9:96:30:65:66:46:6d:ed:5b:d0:27:
6b:db:23:e9:0f:8c:c9:be:be:a6:fe:c0:7d:2b:29:
64:e9:c0:e5:fd:af:fc:61:d7:e1:9b:04:71:e0:46:
b5:ea:6b:3a:08:83:2d:7a:3a:76:78:ba:ce:00:b1:
55:90:0d:7b:fe:4e:cd:12:32:1b:28:07:40:db:51:
4c:34:fd:f5:8a:9d:08:e5:0c:a1:0f:32:a1:1c:3a:
f8:ae:59:12:b5:77:03:24:74:c6:89:90:45:7b:68:
0e:7f:ee:cb:96:f0:8d:2d:8e:3d:ec:9b:20:3d:e9:
95:ea:18:98:af:d7:17:9a:cc:a9:7b:16:89:62:aa:
92:de:c7:ff:d7:4c:59:78:3d:c0:88:73:77:ef:ad:
37:5b:bf:b0:02:dc:76:53:98:12:52:cf:16:32:f0:
20:f7:02:81:ca:f8:a3:9f:14:dd:49:8a:c6:72:d2:
67:a8:d2:0c:5c:6e:e2:62:02:7a:32:fc:0f:1b:77:
3f:64:2f:d5:b0:07:2b:6d:75:65:36:f7:e9:dd:ee:
72:b5:5c:18:1a:6f:78:23:ac:93:1f:c0:f4:20:4f:
ce:d2:67:cf:6b:cd:c0:a9:54:2d:11:34:e8:e8:d1:
e7:15:b1:02:b1:71:97:36:1e:52:23:c8:48:b1:b2:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:E5:BB:14:8A:1A:EE:B2:86:39:93:93:59:0F:67:25:A5:DC:3C
X509v3 Authority Key Identifier:
keyid:E2:FA:7A:2C:BC:32:79:18:80:42:C3:41:3D:D9:E2:49:7C:D4:9D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:08:ac:42:67:91:c5:1c:0a:e8:aa:27:af:79:9c:b3:99:52:
59:87:46:cb:24:87:04:72:2c:8c:51:22:b3:e9:ba:1a:0d:16:
20:d1:bf:83:8b:c8:e5:11:70:09:1b:55:36:cb:74:db:c4:35:
a0:f2:c5:c6:d1:cc:8f:a0:0e:42:bc:0f:ef:1b:45:16:22:6b:
4f:17:5c:7e:4e:b9:71:d3:96:55:ba:b4:78:85:b8:a2:ff:22:
17:73:10:60:72:bf:46:98:e9:0d:84:f7:e9:8f:ab:23:a8:09:
60:34:95:90:6a:f0:cb:67:ff:18:08:ff:25:99:55:de:bd:d4:
17:d8:47:a0:79:a0:e3:83:94:7f:2d:f5:92:4f:22:b0:63:8d:
a1:47:34:77:b1:df:29:e3:49:57:c0:e9:c5:82:74:60:0e:71:
05:0f:dc:01:43:3e:e0:fb:1c:1f:6e:42:be:8e:88:cb:bc:5b:
f5:92:df:33:e2:49:b7:df:ce:e3:c1:58:ff:a9:96:92:78:69:
c6:b7:5c:23:ab:08:74:bd:84:ee:e7:ef:ff:bb:8a:7b:c8:86:
ba:4b:fa:3f:cb:4c:e2:2c:ef:ef:5a:c9:2b:10:31:15:26:26:
92:74:81:83:f0:8f:19:31:8b:98:8b:6d:da:79:ab:08:16:a3:
21:de:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:04:21 2026 by rpki-client